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Abstract 

Given g > 1, the number n(g) of numerical semigroups S C N of 
genus |N \ S\ equal to g is the subject of challenging conjectures of 
Bras-Amoros. In this paper, we focus on the counting function n(g, 2) 
of two-generator numerical semigroups of genus g, which is known to 
also count certain special factorizations of 2g. Further focusing on the 
case g = p k for any odd prime p and k > 1, we show that n(p k , 2) only 
depends on the class of p modulo a certain explicit modulus M(k). 
The main ingredient is a reduction of gcd(p a + 1, 2p@ + 1) to a simpler 
form, using the continued fraction of a//3. We treat the case k = 9 in 
detail and show explicitly how n(p 9 , 2) depends on the class of p mod 
M(9) = 3 • 5 • 11 • 17 • 43 • 257. 

Keywords. Gap number; Sylvester's theorem; Special factorizations; 
Euclidean algorithm; Continued fractions; RSA. 

1 Introduction 

A numerical semigroup is a subset S C N containing 0, stable under addition 
and with finite complement in N. The cardinality of N \ S is then called the 
gap number or the genus of S. It is well known that, given g 6 N, there 
are only finitely many numerical semigroups of genus g. Yet the question 
of counting them seems to be a very hard problem, analogous to the one of 
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counting numerical semigroups by Frobenius number. See [TJ [2] for some nice 
conjectures about it. The problem becomes more tractable when restricted 
to semigroups S — (a,b) = f% + Nb with two generators. So, let us denote 
by n(g, 2) the number of numerical semigroups S = (a, b) of genus g. On the 
one hand, determining n(g, 2) is linked to hard factorization problems, like 
factoring Fermat and Mersenne numbers [3]. On the other hand, the value 
of n(g, 2) is known for all g = 2 k with k > 1, and for all g = p h with p an 
odd prime and k < 8. Indeed, exact formulas are provided in [3J, showing in 
particular that n(p k , 2) for k = 1, 2, 3, 4, 5, 6, 7 and 8 only depends on the 
class of p modulo 3, 1, 15, 7, 255, 31, 36465 and 27559, respectively. See also 
Section where these formulas are given in a new form. 

Our purpose in this paper is to extend our understanding of n(p k ,2) to 
arbitrary exponents k EE Giving exact formulas in all cases is out of reach 
since, for instance, a formula for n(p A097 , 2) would require the still unknown 
factorization of the 12th Fermat number 2 2 +1. However, what can and 
will be done here is to show that, for all k > 1, the value ofn(p k ,2) only 
depends on the class of p modulo some explicit modulus M(k). 

This result is formally stated and proved in Section |H Here is how M(k) 
is defined: 

k 

M{k) = rad(JJ (2*/ gcd ^ - (-l)*/***.*))), 
i=i 

where rad(n) denotes the product of the distinct prime factors of n, i.e. the 
largest square-free divisor of n. We start by recalling in Section [2] that n(g, 2) 
can be identified with the counting function of certain special factorizations 
of 2g. In Section[33 we reduce gcd(p a + 1, 2p° + 1) for a, (3 G N to the simpler 
form 

gcd ( p gcd(a,/3) ± c ) 

where p, c G Z only depend on a, (3 and not on p. This reduction uses the 
continued fraction of a/ (3 and directly leads to our main result in Section HI 
In Section [51 we introduce basic binary functions X a>q which will serve as 
building blocks in our formulas. The case k = 9 is treated in detail in 
Section El where we give an explicit formula for n(p 9 , 2) depending on the 
class of p mod M(9) = 3 • 5 ■ 11 ■ 17 ■ 43 ■ 257. We also provide a formula in 
the case k — 10 with somewhat less details. Finally, in the last section we 
give and prove new formulas for n(p k , 2) with k < 8 in terms of the X a ^ q . 

Background information on numerical semigroups can be found in the 
books HE]. 
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2 Special factorizations of 2g 

We first recall from [3] that n(g, 2) can be identified with the counting number 
of factorizations uv of 2g in N satisfying gcd(w + l,v + 1) = 1. In formula: 

n(g, 2) = #{{«, C N | uv = 2g, gcd(u + 1, v + 1) = 1}. (1) 

This follows from the classical theorem of Sylvester [6] stating that whenever 
gcd(a, b) = 1, the genus g of the numerical semigroup S = (a, b) is given by 

= (q-l)(6-l) 
9 2 

For g = p k with p an odd prime, an immediate consequence of (CQ) is the 
following formula. 

Proposition 2.1 For any odd prime p and exponent k > 1, we have 

n(p k , 2) = #{0 < % < k | gcd(p 4 + 1, 2p k ~ i + 1) = 1}. ■ 

Thus, in order to understand the behavior of n(p k ,2), we need to gain 
some control on 

gcd(p Q + 1,2/ + 1) 

for a, (3 G N, and hopefully find ways to determine when this greatest com- 
mon divisor equals 1. This is addressed in the next section. 

3 On gcd(p a + 1,2^ + 1) 

Here is the key technical tool which will lead to our main result in Section HJ 
Given a, (3 G N, we shall reduce the greatest common divisor 

gcd(p Q + l,2/ + l) 

to the simpler form 

gcd(p <5 ±2", C ), 

where 5 = gcd(a, (3) and where p, c G Z only depend on a, (3 and not on p. 
For this purpose, it is more convenient to work in the ring Z[2 _1 ] where 2 is 
made invertible. Moreover, one may effortlessly replace Z[2 _1 ] by any unique 
factorization domain A, and 2 by any invertible element u in A. Of course 
then, the gcd is only defined up to invertible elements of A. The proof in 
this more general context remains practically the same. 
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Proposition 3.1 Let A be a unique factorization domain and let x,u G A 

with u invertible. Let a,^ 6 N and set 5 = gcd(a,/3). Then there exists 
p G Z such that 

gcd{x a + 1, ux 15 + 1) = gcd(x s ± u p , u a/s - (-i)^)/ 5 ). 

The proof is based on a careful study of the successive steps in the Eu- 
clidean algorithm for computing gcd's. 

Proof. First note that, since u is invertible, we have 

gcd(x° + 1, ux? + 1) = gcd(x a + 1, x? + u^ 1 ). 

Set r = a,r 1 = (3. Consider the Euclidean algorithm to compute gcd(r , ri): 

Ti = air i+1 + r i+2 (2) 

for all < % < n — 1, where < r i+1 < for all 1 < % < n — 1, r n+1 = 0, 
r n = gcd(r , ri). Of course, the a^s are the partial quotients of the continued 
fraction [a , ai, . . . , a n ] of a/ f3. We have 



r< \ _ / Oi 1 \ / r m 



(3) 



for all < i < n — 1. Set (s , «i) = (1,1) and (t ,ti) = (0,-1). Then we 
have 

x ro + l = x ro - (-1) S1 V°, 
x^+u- 1 = x n - (-l) 81 ^ 1 . 

For i = 0, . . . ,n — 1, recursively define 

ti+2 — ti — Oiti+x. 

Then as in (13]), we have 



Sj \ /dj lj| s i+1 

ti+J 1 i o) U +2 



(4) 
(5) 
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for all < i < n — 1 . Finally, for all < j < n + 1 , set 

Note that f = x ro + 1, fi = x ri + u _1 , and 

f n+1 = 1 - ( 6 ) 

since r n+1 = 0. 

Claim. For all < i < n — 1, we have 

gcd(/i, f i+ i) = gcd(/ i+ i, /j +2 ). (7) 
Indeed, it follows from fl2]) that 

/< = x ri -(-l) Si ^ 

= (x n+i px n + 2 - (-iy*u u . 

Now, since 

x n+i = mo( i f. +u 

we find 

/i = ((-l) s ' +1 u u+1 ) a >x r '+ 2 - (-l) 8i u u mod 

= (_ 1 )o 1 . i+ i u a i t i+ i a .r <+a _ (_iyi u ti moc l f. +v 

Thus, 

= x r l+2 _ (_ 1 y i -a i s i+lu t i -a i t i+1 mod 

= x n+2 - (-l) Sl +V l + 2 mod /i+i 
= f i+2 mod / m . 

Consequently, we have fi = (—l) aiSi+1 u aitl+1 fi + 2 mod /j+i. Using the equality 

gcd(f,g) = gcd(g,h) 
whenever / = h mod (7 for elements in A, we conclude that 

gcd(/ i5 / i+1 ) = gcd(/ m , (-1)^+^+^+2) 

= gcd(/i+i, f i+2 ) 
5 



since (— l} aiSi+1 u aiti+1 is a unit in A. This proves the claim. 
As a first consequence, we get 

gcd(/ , /i) = gcd(/ n , f n+ i). (8) 

Denote now 



n-l 



i=0 



0/ \a 2 i «22 



We have detA = (— l) n , and it follows from repeatedly applying (J3J) that 



r V V / ' 

This implies, in particular, that an = r^jr n and 021 = T\jr n . Similarly, 
using (J5J) repeatedly, we have 

a-1 (to\ I tn 



t\ J \tn+i J 

Since A- 1 = (-1)" ~" 12 ^ and f *°J = (®A , this implies that 

t n+1 = (-l) n+1 a n = (-l) n+1 r /r n . 
Finally, using (TjJ repeatedly, we have 

a-1 I S 0\ _ ( S r 



Si \S n+ i 



As above, and since I S ° ) = I " ) , we find that 



s n+ i = (-l) n (-a 2 i + an) = (-l) n (r - r x )jr n . 

Summarizing, it follows from the equality (jS}, the expression ([6]) for f n +i, 
and the above values of s n+ i,t n+ i, that 

gcd(x Q + 1, ux 13 + 1) = gcd(/«, fn+l) 

= gcd(x r?l - {-l) Sn u tn , 1 - (-l)** 1 ^ 1 ) 
= gcd(x 5 - (-l) Sn u tn , u a,& - (-i)^-/ 3 )/- 5 ). 
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The special case of interest to us, namely where A = Z[2 x ] and u = 2, 
reduces to the following statement. 

Corollary 3.2 Let 1 < i < k be given integers, and set 5 = gcd(z, k). Then 
there exists p GZ such that for any odd prime p, we have 

gcd(p* + 1, 2p k ~ l + 1) = gcd(/ ± 2 P , 2 l/s - (-l) k/s ). 

Proof. First observe that gcd(p* + 1, 2p k ~ % + 1) is odd since the second 
argument is, so we may as well work in Z[2 _1 ] when computing this gcd. 
Set a = i, (3 = k — i. Since gcd(z, k — i) = gcd(i,k), the values of 5 in 
Proposition 13.11 and here are the same. Now (a — f3)/5 = (2i — k)/d~, and so 

(_l)(<*~/3)/<5 = (_l) fc /<5. 

The claimed formula for gcd(p l + 1, 2p k ~ l + 1) now follows directly from that 
in Proposition 13.11 ■ 

Consequently, given 1 < i < k, an odd prime p satisfies the condition 

gcd(p i + l,2/-*) + l = 1 

if and only if p belongs to a certain union of classes mod (2'/ <5 — (— l) fc//<5 ), 
where as above 5 = gcd(i, k). This is the key to our main result below. 

4 The main result 

For a positive integer n, let rad(n) denote the radical of n, i.e. the product 
of the distinct primes factors of n. For instance, rad(4) = 2 and rad(6) = 
rad(12) = rad(18) = 6. Given k > 1, let us define 

k 

M(k) = rad(JJ (2 4/gcd(4 ' fe) - (-l) fe/gcd(i ' fc) )). 

i=l 

Note that if k is odd, the formula becomes 

k 

M(k) = rad(Q (2 4 /s^) + i)) ! 
i=i 

whereas if k is even there is no such reduction in general, since the exponent 
k/ gcd(i, k) may assume both parities. Here is our main result. 
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Theorem 4.1 For any odd prime p and k > 1, the value ofn(p k ,2) only 
depends on the class of p modulo M(k). 

Proof. Recall the formula given by Proposition 12.11 

n(p k , 2) = #{0 <i<k \ gcdty + 1, 2p k ~ i + 1) = 1}. (9) 

If i — 0, then gcd(2,2p fc + 1) = 1 always, since p is odd. Assume now 
1 < % < k, and set 

m k {i) = 2 i /gcd(i,fe) _ (_ 1 )fe/gcd(i,fe)_ 

By Corollary 13. 2 [ the value of gcd(p l + 1, 2p k ~ l + 1) only depends on the class 
of p mod mk(i)- Therefore, it follows from (Q and this property of m;(/c) 
that if we set 

k 

M(k) = rad(JJm fc (?)), 

i=i 

the value of n(p k , 2) only depends on the class of p mod M(k). m 

For concreteness, Table 1 gives the value of M(k) for 1 < k < 10. We have 
seen that n(p k , 2) only depends on the class of p modulo M{k). But M{k) is 
not necessarily the smallest modulus with this property, only a multiple of 
it. For instance, we have M(4) = 21, but the value of n(p , 2) only depends 
on the class of p mod 7, as stated in the Introduction. However, for all odd k 
in the range 1 < k < 9, the modulus M{k) actually turns out to be optimal 
for the desired property. (See [3] and Section [71) 



k 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


M(k) 


3 


3 


15 


21 


255 


465 


36465 


82677 


30998055 


16548735 



Table 1: First 10 values of M{k). 



5 The basic functions X a ^ 

We now introduce numerical functions X a q , with values in {0, 1}, which will 
subsequently serve as building blocks in our explicit formulas for n(p k , 2) 
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with k < 10. Given integers a, q with q > 2, the definition of 

X a , g :Z^{0,l} 
depends on the distinct prime factors of q, as follows. 

• If q is prime, then X a ^ q is the indicator function of the complement of 
the subset a + qL in Z, i.e. 



1 if n ^ a mod g, 
if n = a mod g. 



If qi, . . . , q t are the distinct prime factors of q, then we set 

t 



In particular, since X aA only depends on the prime factors of q, we have 

Xa,q -^Ci,rad(g)- 

Note that X a>q only depends on the class of a mod q. It is also plain that 
X a , g (ri) only depends on the class of n mod q. 

We now establish a few more properties of these functions. The first one 
links X aiq (n) with gcd(ri — a, q), and so will be useful to capture occurrences 
of the equality gcd(p* + 1, 2p k ~ l + 1) = 1. 

Proposition 5.1 Let a, q be integers with q > 2. For all iigZ, we have 

_ Jl if gcd(n - a, q) = 1, 
~ \ t/noi. 

Proof. Let qi, . . . ,qt be the distinct prime factors of g. Then we have 

X a , 3 (n) = l Xa.Jn) = 1 Vi 

-<=>- n ^ a mod Vz 

-<=>• gcd(n — a, gj) = 1 Vi 

-<=>- gcd(n — a,q) — 1. 



9 



Since X a ^ q (n) only takes values in {0, 1}, this implies that X a ^(ri) = if and 
only if gcd(n — a, q) ^ 1. ■ 

Next, for determining n(p k ,2), we often need to evaluate X a ^(p s ) with 
s > 2. The next two properties help remove that exponent s. The first one 
reduces the task to the case where s divides q — 1. It suffices to consider the 
case where q is prime. 

Proposition 5.2 Let q be a prime number, and let a, s be integers with 
s > 2. Write s = te with t = gcd(s,g — 1), so that gcd(e, q — 1) = 1. Let 
d eN satisfy de = 1 mod q — 1 . TTien 



/or a// integers n. 

Proof. This is the heart of the RSA cryptographic protocol, which relies 
on the fact that exponentiation to the power e in Z/gZ is a bijection, whose 
inverse is exponentiation to the power d. We have 



Thus, we may now assume that the exponent s divides q — 1. 

Proposition 5.3 Let q be a prime number, and let a,s be integers with s 
dividing q — 1. Let g G N be an integer whose class mod q generates the 
multiplicative group of non-zero elements in IjqTL. We have: 

• If a is not an s-power mod q, then X a)q (n s ) = 1 for all n. 

• If a in an s-power mod q, then a = g m mod q for some integer i such 
that < % < (q — l)/s — 1, and 





n s = a mod q 





for all integers n. 
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Proof. In the group (Z/gZ)* of nonzero classes mod q, the set of s-powers 
is of cardinality (g — l)/s and coincides with 

{g si mod q\0<i<(q- l)/a - 1}. 

First, if a is not an s-power mod q, then n s ^ a mod q for all n, implying 
X a , q {n s ) = 1 for all n. Assume now a is an s-power mod q. By the above 
remark, there exists < i < (q — l)/s — 1 such that a = g m mod q. We have 

X ai? (n s ) = n s = a mod g 

n s = g Si mod q 




= 1 mod g. 



This means that n/g 1 is of order dividing s in the group (Z/gZ)*. Now, the 
elements of order dividing s in this group constitute a subgroup of order s 
generated by g( q ~ l ">/ s . Thus, there exists an integer j such that < j < s — 1 
and satisfying 

- = grti- 1 )'* mod q, 
9 l 

yielding 

X a , q {n s ) = n = g i+ i^ i y s mod g. 

Summarizing, for a = g Si mod g, we have established the equivalence 

X a , q {n s ) = -<=^ ]l s i +J (,-i)/ !i9 (n) = 0, 

3=0 

whence the claimed equality X a ^ q {n s ) = YljZo X g i+j(q-i)/s iq (n). m 

Example 5.4 In order to establish our formula for n(p 10 , 2) in Section 0, 
the term X 8y n(p 2 ) turns out to be involved. Now 8 is a square mod 17, namely 
8 = 5 2 = 12 2 mod 17. Thus, the above result yields 

X 8 ,n (p 2 ) = X 5>17 (p)X 12tl7 (p). 
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6 The cases k = 9, 10 



Explicit formulas for n(p h ,2) with p an odd prime and k < 6 or k = 8 are 
given in [3]. Here we go further and treat the case k = 9 in detail. This 
will show how Corollary 13.21 can be applied, and will also give a sense of 
the increasing complexity of these formulas. We also briefly address the case 
k = 10. The main ingredients are the basic functions X a ^ q defined in the 
preceding section. 

Here comes our formula for n(p 9 , 2). The fact that it depends on the class 
of p mod M(9) follows from this prime decomposition: 

M(9) = 30998055 = 5 • 17 • 257 • 3 ■ 11 • 43. 

Theorem 6.1 Let p be an odd prime. Then we have 

n(p 9 ,2) = l + 2X 3i 5(p)+X 9il7 (p)+X 128i257 (p)+X 2i 3(p)-(3+X 2ill (p)+X 8i4 3(p)). 



Proof. By Proposition 12.11 i n order to determine n(p 9 , 2), it suffices to count 
those exponents i between and 9 satisfying gcd(jo* + 1, 2p 9 ~ % + 1) = 1. Using 
Corollary 13.21 and the calculations leading to it, these gcd's may be reduced 
as follows: 

gcd(p° + l,2p 9 + l) = 1 

gcd^ + l^ + l) = gcd(p+l,3) 

gcd(> 2 + l,2p 7 + 1) = gcd(2p-l,5) 

gcd(p 3 + 1, 2p 6 + 1) = gcd(p 3 + 1,3) = gcd(p + 1,3) 

gcd(p 4 + l,2p 5 + l) = gcd(2p-l,17) 

gcd(p 5 + l,2p 4 + l) = gcd(p-2,33) 

gcd(p 6 + l,2p 3 + l) = gcd(2p 3 + l,5) 

gcd(p 7 + 1, 2p 2 + 1) = gcd(p - 8, 129) 

gcd(j» 8 + 1, 2p l + 1) = gcd(2p + 1, 257) 

gcd(p 9 + 1, 2p° + 1) = gcd(p 9 + 1,3) = gcd(p +1,3). 

Now, by Proposition 15.11 and the properties of the functions X atQ , these equal- 
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ities imply the following equivalences: 



gcd(p° + 1, 2p 9 + 1) = 1 always 
gcdfr 1 + 1, 2p 8 + 1) = 1 X 2)3 (p) = l 

gcd(p 2 + l,2p 7 + l) = l X 3>5 (p) = l 

gcd(p 3 + l,2p 6 + l) = l ^ X 2>3 (p) = l 
gcd(p 4 + l,2p 5 + l) = l X g , 17 (p) = l 

gcd(p 5 + l,2p 4 + l) = l X 2)33 (p) = l 

gcd(p 6 + l,2p 3 + l) = l ^ X 3)5 (p) = l 

gcd(p 7 +l,2p 2 + l) = l X 8 ,129(P) = 1 

gcd(p 8 + l,2p 1 + l) = l X 128 , 257 (p) = 1 

gcd(p 9 + l,2p° + l) = l ^ X 2j3 (p) = l. 



Read sequentially, this table directly yields the following first formula for 
n(p 9 , 2), with 10 summands, in terms of the functions X a ^ q : 

n(p 9 , 2) = 1 + X 2j3 (p) + X 3)B (p) + X 2)3 (p) + X 9>17 (p) + X 2 , 33 (p) 

+^3,5(P) + ^8,129 (P) + ^128,257 (p) + ^2,s(p) 

= 1 + 3X 2>3 (p) + 2X 3j5 (p) + X 9il7 (p) + X 2>33 (p) + X 8>129 (p) 

+^128,257(P)- 

Among the moduli involved above, the only non-prime ones are 33 = 3 ■ 11 
and 129 = 3 • 43. By definition of X a q for non-prime q, we have 

-^2,33 — ^2,3^2,11 
-^8,129 — -^8,3^8,43- 

Moreover, since X aA only depends on the class of a mod q, we have 

-^8,3 = -^2,3- 

Substituting these equalities in the above formula for n(p 9 , 2), we get 
n{p\ 2) = l+2X 3i5 (p)+X 9il7 (p)+X 128i257 (p)+X 2i 3(p)-(3+X 2ill (p)+X 8i 4 3 (p)), 
as claimed. ■ 
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We now derive another version of our formula for n(p 9 , 2), from which its 
values are easier to read. Given positive integers qi, . . . ,q t , we denote by 

p qi ,..., qt ■ Z — > Z/qiZ x • ■ ■ x Z/q t Z 

the canonical reduction morphism p qi ,...,q t {n) = (n mod q±, . . . , n mod q t ). 
Moreover, we write n = —a mod q instead of n ^ a mod q. For example, 
the condition 

P^nMv) = (3,-9,-128) 
means p = 3 mod 5, p ^ 9 mod 17 and p ^ 128 mod 257. 

Corollary 6.2 Let p be an odd prime. Consider the following functions of 
p depending on its classes mod 5, 17,257 and 11,43, respectively: 



A(p) 



if P5,17,257(P) = (3,9,128) 

if P5,i7,25 7 (p) G {(3, 9, -128), (3, -9, 128)} 

if P5,i7,25 7 (p) e {(3, -9, -128), (-3, 9, 128)} 

*/ P5,i7,25 7 (p) e {(-3, 9, -128), (-3, -9, 128)} 



1 

2 
3 
4 

5 2/ P5 ; 



17,257 



(P) 



n3,-9,-128 



P(p) 



T/ien we have 



if Pn,4 3 (p) = (2,8) 

i/ p 1M3 (p)G{(2,-8),(-2,8)} 

*/ Pi M3 (p) = (-2,-8). 



n(p 9 ,2) 



A(p) if p = 2 mod 3, 

A(p) + /i(p) if p ^ 2 mod 3. 



Proof. This directly follows from the preceding result and the easy to prove 
equalities 

A(p) = 1 + 2X 3 , 5 (p) +X 9jl7 (p) +X 128> 2 57 (p), 
/i(p) = 3 + X 2ill (p)+X 8i43 (p). 



It is still clearer now that n(p 9 , 2) is determined by the class of p mod 
M(9) = 3 • 5 ■ 17 • 257 • 11 • 43, and that M(9) is the smallest modulus with 
this property. 
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We close this section by briefly treating the case k = 10. The formula 
obtained shows that n(p w , 2), for p an odd prime, is determined by the class 
of p modulo Af (10) /15 = 7 ■ 17 • 73 ■ 127. 

Theorem 6.3 Let p be an odd prime. Then we have 

n(p w , 2) = 7 + X 3J {p){l + X 36 , 73 (p)) + X 5tl7 (p)X 12 ,n(p) + X 123 , m (p). 

Proof. After reducing gcd(p*+l, 2p 10_ *+l) for < z < 10 as in Corollary 13. 2 [ 
and using Proposition 15.11 involving the functions X aq , we obtain this first 
raw formula: 

n(p 10 ,2) = 2 + X_ li3 (p 2 )+X3, 7 (p)+X„ 2i5 (p 2 ) + l + X 2i9 (p 2 )+X 12 3, 127 (p) 
+ X 8<17 (p 2 ) + X 255 ,5ii(p) + X_ li3 (p 10 ). 

We now invoke Proposition 15.31 several times. Since —1 is not a square mod 
3, we have X_ 13 (p 2 ) = 1. The same reason yields X 2 $(p 2 ) = X_ 13 (p 10 ) = 1. 
Similarly, we have X_ 2 ^(p 2 ) = 1 as —2 is not a square mod 5. As already 
explained in Example I5.4[ we have X 817 (p 2 ) = X 517 (p)A A 1217 (p). Finally, 
since 511 = 7 • 73, and since 255 is congruent to 3 mod 7 and to 36 mod 73, 
we have 

^255,511 (?) = X 3 j(p)X 36J3 (p). 

Inserting these reductions into the raw formula gives the stated one, where 
now the only argument of the various basic functions X a>q is p and all involved 
q's are primes. ■ 

7 The cases k < 8 revisited 

While explicit formulas for n(p k ,2) with k < 6 and k = 8 are given in [3], 
we provide here new, shorter formulas in terms of the basic functions X ajQ 
for k < 8, including k = 7. The construction method is similar to the cases 
k = 9, 10 and relies on the reduction of gcd(jo l + l,2p k ~ l + 1) provided by 
Corollary [321 
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Theorem 7.1 Let p be an odd prime. Then we have 



n{p\2) 


= 1 - 


\-x 2 M 


n(p 2 ,2) 


= 3 




n(p 3 ,2) 


= 1 - 


h2X 2>3 (p) + X 2:5 (p) 


n(p\2) 


= 4- 


hX 3J (p) 


n(p 5 ,2) 


= 1 - 


H3X 2i3 (p) + X 3 , 5 (p)+X 8il7 (p) 


n(p 6 ,2) 


= 6- 


^15,31 (?) 


n(p\2) 


= 1 + X 2 »(3 + X 7 ,ii(p)) + X 2j5 (p)(l + X 6>13 (p)) + *2,ir(p) 


n(p 8 ,2) 


= 6- 


H X 5 , 7 (p) + X 23 ,3l(p) + ^63,127(P)- 



Proof. Corollary 13.21 and its proof method yield the following reductions 
of gcd(j>* + 1, 2p fc_ * + 1) for i = 1, . . . , k. The case i = is omitted, as 
gcd(jo + 1, 2p k + 1) = 1 always. A few more arithmetical reductions are also 
applied. For instance, the equality gcd(p 2 + 1,3) = 1 below follows from the 
fact that —1 is not a square mod 3. This is one easy case of Proposition 15.31 



k = 1 : 



gcd(p 1 + l,2p° + l) 



gcdO+1,3) 



k 



= 2 : 



gcd^ + l^p 1 + 1) 
gcd(p 2 + l,2p° + l) 



gcd(2p + l,l) 
gcd(p 2 + l,3) 



k 



= 3 : 



gcd(p 1 + l,2p 2 + l) 
gcd(p 2 + 1,2^ + 1) 
gcd(p 3 + l,2p° + l) 



gcd(p+ 1,3) 
gcd(2p+ 1,5) 
gcd(p 3 + l,3) 



gcd(p + 1,3) 



k 



= 4 : 



gcdfc 1 + 1, 2p 3 + 1) 
gcd(p 2 + l,2p 2 + l) 
gcd(p 3 + 1,2^ + 1) 
gcd(p 4 + l,2p° + l) 



gcd(p + l,l) = 1 
gcd(2p 2 + 1, 1) = 1 
gcd(2p + l,7) 



gcd(p 4 + l,3) = 1 
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k 

gcd(p 1 + l,2p 4 + l) 
gcd(p 2 + l,2p 3 + l) 
gcd(p 3 + l,2p 2 + l) 
gcd(p 4 + 1,2^ + 1) 
gcd(p 5 + l,2p° + l) 

k 

gcd(p x + l,2p 5 + 1) 
gcd(p 2 + l,2p 4 + l) 
gcd(p 3 + l,2p 3 + 1) 
gcd(p 4 + l,2p 2 + l) 
gcd(p 5 + 1,2/ + 1) 
gcd(p 6 + l,2p° + l) 

k 

gcdip 1 + 1, 2p 6 + 1) 
gcd(p 2 + l,2p 5 + l) 
gcd(p 3 + l,2p 4 + l) 
gcd(p 4 + l,2p 3 + l) 
gcd(p 5 + l,2p 2 + l) 
gcd(p 6 + 1,2^ + 1) 
gcd(p 7 + l,2p° + l) 

k 

gcd(p x + l,2p 7 + 1) 
gcd(p 2 + l,2p 6 + l) 
gcd(p 3 + l,2p 5 + l) 
gcd(p 4 + l,2p 4 + l) 
gcd(p 5 + l,2p 3 + l) 
gcd(p 6 + l,2p 2 + l) 
gcd(p 7 + 1,2^ + 1) 
gcd(p 8 + l,2p° + l) 



5 : 

gcd(p + l,3) 
gcd(2p-l,5) 
gcd(p - 2, 9) 
gcd(2p + l,17) 

gcd(p 5 + l,3) = gcd(p + l,3) 

6 : 

gcd(p + l,l) = 1 
gcd(p 2 + l,3) = 1 
gcd(2p 3 + 1, 1) = 1 
gcd(2p 2 + 1, 5) = 1 
gcd(2p + l,31) 
gcd(p 6 + l,3) = 1 

7 : 

gcd(p + 1,3) 
gcd(2p + l,5) 
gcd(2p-l,9) 
gcd(p - 2, 17) 
gcd(p + 4, 33) 
gcd(2p+ 1,65) 

gcd(p 7 + l,3) = gcd(p + l,3) 

8 : 

gcd(p + l,l) = 1 
gcd(p 2 + l,l) = 1 
gcd(p + 2, 7) 
gcd(2p 4 + 1, 1) = 1 
gcd(4p + l,31) 
gcd(2p 2 + l,7) = 1 
gcd(2p + 1, 127) 
gcd(p 8 + l,3) = 1. 
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As in the case k = 9, the claimed formulas follow by reading these tables 
sequentially and using properties of the functions X a ^ q from Section |5j ■ 

In particular, these formulas confirm that for k = 1, . . . , 8, the value of 
n(p k , 2) at an odd prime p is determined by the class of p modulo 3, 1, 3 • 5, 
7, 3 • 5 • 17, 31, 3 ■ 5 • 11 • 13 ■ 17 and 7 • 31 • 127, respectively 

8 A question 

We shall conclude this paper with an open question. On the one hand, we 
have obtained explicit formulas for n(p k , 2) in all cases k < 10. On the other 
hand, we know from [3] that no such formula can be expected in the case 
k = 4097, at least as long as the prime factors of the 12th Fermat number 
2 2 +1 remain unknown. Well then, what happens in the intermediate range 
11 < k < 4096? Are there fundamental obstacles which would prevent us to 
obtain exact formulas for n(p k , 2) all the way up to k = 4096? 
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